PATENT 

IN THE CLAIMS 

1 1 . [currently amended] A method (7§0> for processing data packets in a 

2 gateway element, said method comprising the steps of: 

3 - 6onFvpafing'(7^4^-^3-fia€ket4Q providing screening information 

4 comprising a set of rules, af\4 

5 - pmGessing-(7-55)-a-data-paGket^CGOFding-to-aw 

6 *=»eadef-4nfefrmtiefvof-said-data-paGket-mat^ 

7 G ha ra G4er4z€d4F»-t*hat- 

8 - said screening information f& being hierarchically structured so that it 

9 comprises a first rule, which specifies first header information, and a subset of 

1 0 rules relating to said first rule, aod4B-that 

1 1 - in-said-Btep-of comparing a data packet,-&aid-data-paGket4& compared 

1 2 f7§4r75S) to said subset of rules only if the header information of the data packet 

1 3 matches the header information of said the first rule—and 

1 4 - processing a data packet according to a rule belonging to the set of rules. 

1 5 the header information of said data packet matching the header information of said 

1 6 rule. 



1 2. [currently amended] A method aGGordif\g-to-cla4m4T-Ghara«teFized"H44^ for 

2 processing data packets in a gateway element, said method comprising steps of: 

3 - providing screening information comprising a set of rules, said screening 

4 information being hierarchically structured so that it comprises a first rule, which 

5 specifies first header information, and a subset of rules relating to said first rule. 

6 - said subset of rules com^9r4se8 comprising a second rule, which specifies 

7 second header information, and a second subset of rules, said second subset of 
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8 rules relating to said second rule, an d in that- 

9 - processing a data packet according to a rule belonqina to the set of rules, 

1 0 the header information of said data packet matching the header information of said 

1 1 rule. 

12 - in said step of comparing a data packet, said data packet is compared to 
1 3 said second subset of rules only, if the header information or the data packet 

1 4 matches the header information of the second rule. 

1 3. [currently amended] A method according to claim 1 , •GharaGter4ze<i4n-that 

2 wherein 

3 - said set of rules is an ordered sequence of rules, 

4 - said subset of rules is an ordered sub-sequence of said ordered 

5 sequence of rules, and 

6 - in said step of comparing a data packet, said data packet is compared to 

7 the rules in the order defined by the ordered sequence. 

1 4. [currently amended] A method according to claim 1 ,-Gharaot^i4zed4rvthat- 

2 wherein f or said subset of rules, an entity which is authorized to modify said subset, is 

3 specified. 

1 5. [currently amended] A method according to claim 1 , oharacter-izecMivtl^tat 

2 wherein at least one rule belonging to said subset of rules comprises a generic 

3 information portion, said generic information portion to be replaced with second 

4 information before a data packet is compared to said at least one rule. 
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1 6. [currently amended] A method according to claim 1 , &haf act rized-ifl-ttet 

2 wherein said screening information comprises a first part, which is modifiable by an 

3 entity authorized to configure said gateway element, and a second part, which is 

4 modifiable by an entity specifically authorized to modify said second part. 

1 7. [currently amended] A gateway element (^0> comprising 

2 - means (804)- for storing screening information and 

3 - means (802-> for processing data packetSr&aid-pf0oe&sing4fW0lving 

4 Gompapf£oi^-of-a-4ata^GteH=»eader4o-headef4f^^ 

5 soFeeiw^4frf0fmatioiv©tw^ 

6 packets-afe-ar-r-anged^o-Gompare by comparing header information of a data packet 

7 to screening information , said screening information comprising a first rule, which 

8 specifies first header information, and a subset of rules relating to said first rule, 

9 and"arFar»ged4o-compare-a and wherein said comparing function comprises 

I 0 comparing header information in said data packet to said first rule, and if said 

I I header information in said data packet matches said first header information in said 
1 2 first rule, comparing said data packet to said subset of rules-Gr4y-if4he-header- 

1 3 inf0Fmatiofv<>f4he-4at^-paGk€t-matGhe&4^-+^€^ 

1 8. [currently amended] A gateway element according to claim 7, further comprising: 

2 eha^actefiz^dHf^^vat-it fwthef-compf tse& 

3 - means-(803) for detecting generic information portions in said screening 

4 information, 

5 - means (803) for receiving second information, and 

6 - means (803)- for replacing the generic information portion in said 
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7 screening information with said second information. 

1 9. [currently amended] A gateway element according to claim 8. €hafa€terized4n4hat4t 

2 further comprising: comprises 

3 - means (804>for preventing modification of at least one rule belonging said 

4 information. 

1 1 0. [currently amended] A gateway element according to claim 7, g ha Facte rized-in-tl^vat 

2 it- further comprising: Gomprises 

3 - means (805)- for receiving at least part of said screening information from 

4 a database entity. 

1 11. [currently amended] A gateway element according to claim 1 0, Ghar-actefized4R 

2 t^at-it- further comprising: Gomprtse^ 

3 - means-{SO§)-for fetching at least part of said screening information from 

4 said database entity, said means for fetching being arranged to initiate fetching as 

5 part of configuration of said gateway element. 

1 12. [currently amended] An arrangement (g^^cofrvprism including at least one gateway 

2 element (§0) and a database entity (84)^, said at least one gateway element comprising 

3 - means (804^ for storing information for screening data packets and, 

4 - means (802)- for processing data packets, said processing involving 

5 comparison of a data packet header to header information specified in said 

6 screening information, 

7 chafactefized4n4t=(at~ 
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8 - said database entity GGmprise^ including means (82> for providing 

9 information for screening data packets, 

1 0 - said at least one gateway element further-somprises including means 

1 1 (SOS) for receiving at least part of said information for screening data packets from 
1 2 said database entity, 

1 3 and said processing means (802>-for-prG€es&ifig-dat^-paokets-are 

1 4 arrar^ed being configured t o compare header information of a data packet to 

1 5 screening information comprising a first rule, which specifies first header 

1 6 information, and a subset of rules relating to said first rule, and affanoed- configured 

I 7 to compare a data packet to said subset of rules only if the header information of 
1 8 the data packet matches the header information of the first rule. 

1 13. [currently amended] A-Gomputer-pf^ram-^mprlsing-pFogfam-God^^ 

2 all-the~step&-of--Gtetm4^ft^hen-safd-pr^r'am4sHH^ A computer-readable 

3 medium having computer-executable instructions stored thereon for controlling a 

4 computer to perform the following steps: 

5 providing screening information comprising a set of rules, said screening 

6 information being heirarchicallv structured so that it comprises a first rule, which 

7 specifies first header information, and a subset of rules relating to said first rule: 

8 comparing a data packet to said subset of rules only if the header 

9 information of the data packet matches the header information of the first rule: and 
10 processing a data packet according to a rule belonging to the set of rules. 

I I the header information of said data packet matching the header information of said 
1 2 rule. 
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1 1 4. [currently amended] A computer program product comprising program code means 

2 stored on a computer readable medium for performing^ t^^-^l^thod-0f^^lam4- when said 

3 program product is run on a computer , the steps of: 

4 providing screening information comprising a set of rules, said screening 

5 information being heirarchically structured so that it comprises a first rule, which 

6 specifies first header information, and a subset of rules relating to said first rule: 

7 comparing a data packet to said subset of rules only if the header 

8 information of the data packet matches the header information of the first rule: and 

9 processing a data packet according to a rule belonging to the set of rules. 

I 0 the header information of said data packet matching the header information of said 

I I rule. 



1 15. [currently amended] A data structure {40r-S0r€4^-6^ comprising screening 

2 information, Gtwactef«ed-m-that wherein said screening information is hierarchically 

3 structured so that it comprises a first rule (404>, which specifies first header information, 

4 and a subset of rules {4Q2r4Q^ relating to said first rule, said first header information 

5 being common to said rules belonging to said subset of rules. 

1 16. [currently amended] A data structure (42) according to claim 15, characterized in 

2 that said subset of rules comprises a second rule (421), which specifies second header 

3 information, and a second subset of rules (422, 423), said second subset of rules 

4 relafing to said second rule, said second header information being common to said rules 

5 belonging to said second subset of rules. 

1 17. [new] A method for processing data packets in a gateway element, said method 
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2 comprising the steps of: 

3 - providing screening information comprising a set of rules, said screening 

4 information being hierarchically structured so that it comprises a first rule, which 

5 specifies first header information, and a subset of rules relating to said first rule, 

6 each rule in said subset of rules specifying second header information including a 

7 common first portion that matches to said first header information, and a second 

8 portion that varies from one to another in said subset of rules; 

9 - comparing a data packet to said subset of rules only if the header 

I 0 information of the data packet matches the header information of said first rule; and 

I I - processing a data packet according to a rule belonging to said subset of 

1 2 rules only if said header information of said data packet matches both said first and 

1 3 second portion of the header information of said rule. 
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